arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2108.07019cs.LG
收藏

基于激活范围监控的卷积神经网络硬件容错安全性研究

Towards a Safety Case for Hardware Fault Tolerance in Convolutional Neural Networks Using Activation Range Supervision

Intel(英特尔);University of British Columbia(不列颠哥伦比亚大学)

Florian Geissler, Syed Qutub, Sayanta Roychowdhury, Ali Asgari, Yang Peng, Akash Dhamasia, Ralf Graefe, Karthik Pattabiraman, Michael Paulitsch

摘要:

卷积神经网络(CNN)已成为众多安全关键型计算机视觉应用的一部分,包括人机交互和自动驾驶。现实世界的实现将需要保证其鲁棒性,以防止硬件软错误破坏底层平台内存。基于先前观察到的激活裁剪技术的有效性,我们通过证明范围监督代表了一个高度可靠的故障检测器和缓解器,采用八指数浮点数据表示,为分类器CNN构建了一个原型安全案例。我们进一步探索新的,非均匀的范围限制方法,有效地抑制沉默的数据损坏和不可纠正的错误的概率。作为一个安全相关的端到端用例,我们展示了我们的方法在车辆分类场景中的优势,使用ResNet-50和交通摄像机数据集MIOVision。在这项工作中提供的定量证据可以用来激发进一步的和可能更复杂的CNN安全参数。

英文摘要:

Convolutional neural networks (CNNs) have become an established part of numerous safety-critical computer vision applications, including human robot interactions and automated driving. Real-world implementations will need to guarantee their robustness against hardware soft errors corrupting the underlying platform memory. Based on the previously observed efficacy of activation clipping techniques, we build a prototypical safety case for classifier CNNs by demonstrating that range supervision represents a highly reliable fault detector and mitigator with respect to relevant bit flips, adopting an eight-exponent floating point data representation. We further explore novel, non-uniform range restriction methods that effectively suppress the probability of silent data corruptions and uncorrectable errors. As a safety-relevant end-to-end use case, we showcase the benefit of our approach in a vehicle classification scenario, using ResNet-50 and the traffic camera data set MIOVision. The quantitative evidence provided in this work can be leveraged to inspire further and possibly more complex CNN safety arguments.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑